Microsoft Authenticator policies can be configured here. On the next windows select Authentication methods and then Policies. In the Azure Portal, open Azure Active Directory. Let’s review these settings in the Azure Portal ( ) In the current state, number matching can be enabled for all Microsoft Authenticator users, or for a select group of Microsoft Authenticator users.

We can enable number matching for our users today, there is no need to wait for Microsoft to enable this. If they do not have the number prompt on their computer, they would not be able to approve the MFA request. With number matching, the user would have context around the MFA request to make better decisions. By implementing number matching, we can prevent users from accidentally approving MFA requests.

There are many articles available about MFA fatigue attacks. The main reason for enabling number matching is to make the Microsoft Authenticator Application more secure. Microsoft will remove the admin controls and enforce the number match experience tenant-wide for all users starting May 8, 2023. Number matching is a key security upgrade to traditional second factor notifications in Microsoft Authenticator.

Mfa microsoft